{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-11","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Research short-form video trends and creators with Virlo. Analyze videos, hashtags, sounds and audience signals. Track creators or niches over time using monitors and metered research operations.","did":"18fe1b8b-6e8a-4932-8b8a-2f3dd6109b99","documentation_url":"https://dev.virlo.ai/docs","editorial_description":{"extended_description":"The connector manages recurring niche monitors, tracked items and keyword searches and provides job status and credit balances. Monitor proposals and autonomy settings control ongoing research. Some operations consume usage credits.","schema_version":1,"summary":"Research short-form video trends and creators with Virlo.\nAnalyze videos, hashtags, sounds and audience signals.\nTrack creators or niches over time using monitors and metered research operations."},"homepage_url":"","icon":"","id":"18fe1b8b-6e8a-4932-8b8a-2f3dd6109b99","installs":0,"last_scanned":"","license":"","long_description":"The connector manages recurring niche monitors, tracked items and keyword searches and provides job status and credit balances. Monitor proposals and autonomy settings control ongoing research. Some operations consume usage credits.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly declares permanent niche monitor deletion.","reasoning":"The action destroys meaningful monitoring configuration and accumulated workflow state.","risk_type":"data_deletion","severity":"high","title":"Deletes niche-monitor configuration","triggering_tools_or_skills":["delete_niche_monitor"]},{"evidence":"These tools persist monitor, tracking and autonomy changes in the Virlo account.","reasoning":"They materially change ongoing social-analysis workflows.","risk_type":"data_modification","severity":"medium","title":"Creates and autonomously operates social monitoring","triggering_tools_or_skills":["create_niche_monitor","set_niche_monitor_autonomy","track_creator","track_video","untrack_creator","untrack_video","update_niche_monitor","update_tracking_settings"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication covers Virlo creator analytics, monitors, tracking and account credits; credit costs and autonomy permissions are undocumented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/18fe1b8b-6e8a-4932-8b8a-2f3dd6109b99.json","what_it_proves":"Candidate PR #125 record identity (name \"Virlo Social Media Brain\", publisher, type web_connector) and 50 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/18fe1b8b-6e8a-4932-8b8a-2f3dd6109b99: complete tool_names inventory (50 tools), remote streamable-http endpoint https://dev.virlo.ai/api/mcp/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Virlo explicitly deletes niche monitors and broadly changes autonomous tracking configuration.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:18fe1b8b-6e8a-4932-8b8a-2f3dd6109b99","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 50 names. Runtime verification should establish whether collect, analyze, refresh or tracking actions consume paid credits and what set_niche_monitor_autonomy permits.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":50,"tools_or_skills_total":50},"name":"Virlo Social Media Brain","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=18fe1b8b-6e8a-4932-8b8a-2f3dd6109b99&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://virlo.ai/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Red Lab LLC","publisher_url":"https://dev.virlo.ai/","remote_url":"https://dev.virlo.ai/api/mcp/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: The action destroys meaningful monitoring configuration and accumulated workflow state.","evidence":"Deletes niche-monitor configuration: The complete inventory explicitly declares permanent niche monitor deletion.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes niche-monitor configuration","triggering_tools":["delete_niche_monitor"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change ongoing social-analysis workflows.","evidence":"Creates and autonomously operates social monitoring: These tools persist monitor, tracking and autonomy changes in the Virlo account.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and autonomously operates social monitoring","triggering_tools":["create_niche_monitor","set_niche_monitor_autonomy","track_creator","track_video","untrack_creator","untrack_video","update_niche_monitor","update_tracking_settings"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"info@virlo.ai","tags":["accesses_calendar","deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"analyze_video"},{"description":"","name":"batch_lookup_creators"},{"description":"","name":"check_job_status"},{"description":"","name":"collect_creator_posts"},{"description":"","name":"create_niche_monitor","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change ongoing social-analysis workflows."}},{"description":"","name":"delete_niche_monitor","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: The action destroys meaningful monitoring configuration and accumulated workflow state."}},{"description":"","name":"get_breakout_sounds"},{"description":"","name":"get_creator_audience_demographics"},{"description":"","name":"get_creator_audience_geography"},{"description":"","name":"get_creator_sounds"},{"description":"","name":"get_credit_balance"},{"description":"","name":"get_emerging_trends"},{"description":"","name":"get_hashtag_performance"},{"description":"","name":"get_keyword_search_results"},{"description":"","name":"get_niche_monitor_activity"},{"description":"","name":"get_niche_monitor_data"},{"description":"","name":"get_niche_monitor_events"},{"description":"","name":"get_niche_monitor_proposals"},{"description":"","name":"get_posting_cadence"},{"description":"","name":"get_satellite_run"},{"description":"","name":"get_sound_details"},{"description":"","name":"get_sound_usage_history"},{"description":"","name":"get_sound_videos"},{"description":"","name":"get_tracking_report"},{"description":"","name":"get_tracking_signals"},{"description":"","name":"get_trending_sounds"},{"description":"","name":"get_trending_videos"},{"description":"","name":"get_trends"},{"description":"","name":"get_trends_digest"},{"description":"","name":"list_creator_posts"},{"description":"","name":"list_keyword_searches"},{"description":"","name":"list_niche_monitors"},{"description":"","name":"list_satellite_runs"},{"description":"","name":"list_tracked_items"},{"description":"","name":"lookup_creator"},{"description":"","name":"lookup_hashtag"},{"description":"","name":"lookup_sound"},{"description":"","name":"refresh_creator_audience"},{"description":"","name":"review_niche_monitor_proposal"},{"description":"","name":"search_hashtags"},{"description":"","name":"search_keywords"},{"description":"","name":"search_sounds"},{"description":"","name":"set_niche_monitor_autonomy","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change ongoing social-analysis workflows."}},{"description":"","name":"suggest_keywords"},{"description":"","name":"track_creator","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change ongoing social-analysis workflows."}},{"description":"","name":"track_video","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change ongoing social-analysis workflows."}},{"description":"","name":"untrack_creator","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change ongoing social-analysis workflows."}},{"description":"","name":"untrack_video","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change ongoing social-analysis workflows."}},{"description":"","name":"update_niche_monitor","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change ongoing social-analysis workflows."}},{"description":"","name":"update_tracking_settings","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change ongoing social-analysis workflows."}}],"tools_count":50,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/18fe1b8b-6e8a-4932-8b8a-2f3dd6109b99","uuid":"3f7aec31-0017-5ae2-83a3-19f559622987","verification_tier":"community","version":""},"query_key":"red lab llc virlo social media brain","schema_version":1,"status":"match"}